If you go to account/sessions/active autotokens shows the authotoken id and the ip address and last time accesed. 

If you select that authotoken, and click on View more details a window open and shows 

Scope (Scope)  IP AddressDescription  Generated Time,  Last Accessed Time,  Last Accessed IPAddress and  Last Accessed UserAgent

On the last access ip shows most of the time the server that host my website. However other times show an private ip which i dont know who it is. 

Why does it show as two different IPS?